@wildo-ai/saas-website 1.1.5 → 1.1.7

package/dist/esm/core/external-providers/provider-component-registry.website.d.ts

@@ -0,0 +1,63 @@
+/**
+ * The website's provider-component registry (#1703): the SAME registry the application builds, from
+ * the SAME `components` declaration, over the website's live provider modules.
+ *
+ * A provider declares its components once, on its frontend module. Before this, the website facet
+ * type accepted `components` and nothing on the website read it, so a contact form could not host an
+ * address lookup (#561) and a marketing page could not host any provider component at all. The
+ * registry is `createProviderComponentRegistry` from `@wildo-ai/external-connectors-public/website`
+ * — keyed `capability:providerRef`, consent-gated, script-before-component and browser-only — and
+ * this file only feeds it the website's two inputs:
+ *
+ *   - the HYDRATED website provider registry (both channels joined, so a provider not live for this
+ *     website service contributes no component);
+ *   - the loaders the site's facet library contributes for components an engine provider module
+ *     declares but cannot import (the module lives in a renderer-free package), handed in through the
+ *     page bridge's `providerComponentLoaders` rather than through module-level state, because the
+ *     bridge is the website's one construction site and can carry it explicitly.
+ *
+ * Nothing is loaded here. A component loads when a `WebsiteProviderComponent` slot asks for it, from
+ * an effect — never during the Astro server render.
+ */
+import { type ComponentType } from 'react';
+import { type ProviderComponentDiagnostic, type ProviderComponentLoaderContribution, type ProviderComponentRegistry } from '@wildo-ai/external-connectors-public/website';
+import type { FrontendProvidersBlock } from '@wildo-ai/saas-models/public-runtime';
+import { type FrontendWebsiteProviderRegistry, type GeneratedWebsiteProviderModules } from './frontend-provider-registry.website';
+/** A component type the website's registry hands back once loaded. */
+export type WebsiteProviderComponentType = ComponentType<never>;
+/** The website's provider-component registry: the shared registry, holding React components. */
+export type WebsiteProviderComponentRegistry = ProviderComponentRegistry<WebsiteProviderComponentType>;
+export interface CreateWebsiteProviderComponentRegistryInput {
+    /** The hydrated website provider registry; absent on a site with no providers. */
+    readonly providerRegistry: FrontendWebsiteProviderRegistry | undefined;
+    /** Loaders the site's facet library contributes for engine-declared components. */
+    readonly providerComponentLoaders?: Iterable<ProviderComponentLoaderContribution>;
+    /**
+     * Where a registration or load problem is reported. Defaults to `console.warn`: the website runtime
+     * has no logger service, and a provider component that cannot be offered is a developer-facing fact
+     * that must not be silent.
+     */
+    readonly onDiagnostic?: (diagnostic: ProviderComponentDiagnostic) => void;
+}
+/** Builds the website's provider-component registry from its live provider modules. */
+export declare function createWebsiteProviderComponentRegistry(input: CreateWebsiteProviderComponentRegistryInput): WebsiteProviderComponentRegistry;
+/** What a page bridge builds once per island: the hydrated provider registry and its component registry. */
+export interface WebsiteProviderRegistries {
+    readonly frontendProviderRegistry: FrontendWebsiteProviderRegistry;
+    readonly providerComponentRegistry: WebsiteProviderComponentRegistry;
+}
+/**
+ * Builds both registries for a page bridge, MEMOISED on their inputs.
+ *
+ * Memoised because the component registry caches each loaded component: a registry rebuilt on every
+ * render would forget what it loaded, hand every slot a new registry identity, and make each slot's
+ * load effect run again — a download loop. The inputs are an island prop (`frontendProviders`, fixed
+ * for the island's life) and two module-load-time bridge dependencies, so in practice this builds
+ * once per island.
+ */
+export declare function useWebsiteProviderRegistries(input: {
+    readonly frontendProviders: FrontendProvidersBlock | undefined;
+    readonly frontendProviderModules: GeneratedWebsiteProviderModules | undefined;
+    readonly providerComponentLoaders: Iterable<ProviderComponentLoaderContribution> | undefined;
+}): WebsiteProviderRegistries;
+//# sourceMappingURL=provider-component-registry.website.d.ts.map

package/dist/esm/core/external-providers/provider-component-registry.website.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-component-registry.website.d.ts","sourceRoot":"","sources":["../../../../src/core/external-providers/provider-component-registry.website.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAW,KAAK,aAAa,EAAE,MAAM,OAAO,CAAC;AACpD,OAAO,EAIL,KAAK,2BAA2B,EAChC,KAAK,mCAAmC,EACxC,KAAK,yBAAyB,EAC/B,MAAM,8CAA8C,CAAC;AAEtD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAEnF,OAAO,EAEL,KAAK,+BAA+B,EACpC,KAAK,+BAA+B,EACrC,MAAM,sCAAsC,CAAC;AAE9C,sEAAsE;AACtE,MAAM,MAAM,4BAA4B,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;AAEhE,gGAAgG;AAChG,MAAM,MAAM,gCAAgC,GAAG,yBAAyB,CAAC,4BAA4B,CAAC,CAAC;AAEvG,MAAM,WAAW,2CAA2C;IAC1D,kFAAkF;IAClF,QAAQ,CAAC,gBAAgB,EAAE,+BAA+B,GAAG,SAAS,CAAC;IACvE,mFAAmF;IACnF,QAAQ,CAAC,wBAAwB,CAAC,EAAE,QAAQ,CAAC,mCAAmC,CAAC,CAAC;IAClF;;;;OAIG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,UAAU,EAAE,2BAA2B,KAAK,IAAI,CAAC;CAC3E;AAWD,uFAAuF;AACvF,wBAAgB,sCAAsC,CACpD,KAAK,EAAE,2CAA2C,GACjD,gCAAgC,CAOlC;AAED,4GAA4G;AAC5G,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,wBAAwB,EAAE,+BAA+B,CAAC;IACnE,QAAQ,CAAC,yBAAyB,EAAE,gCAAgC,CAAC;CACtE;AAED;;;;;;;;GAQG;AACH,wBAAgB,4BAA4B,CAAC,KAAK,EAAE;IAClD,QAAQ,CAAC,iBAAiB,EAAE,sBAAsB,GAAG,SAAS,CAAC;IAC/D,QAAQ,CAAC,uBAAuB,EAAE,+BAA+B,GAAG,SAAS,CAAC;IAC9E,QAAQ,CAAC,wBAAwB,EAAE,QAAQ,CAAC,mCAAmC,CAAC,GAAG,SAAS,CAAC;CAC9F,GAAG,yBAAyB,CAe5B"}

package/dist/esm/core/external-providers/provider-component-registry.website.js

@@ -0,0 +1,68 @@
+/**
+ * The website's provider-component registry (#1703): the SAME registry the application builds, from
+ * the SAME `components` declaration, over the website's live provider modules.
+ *
+ * A provider declares its components once, on its frontend module. Before this, the website facet
+ * type accepted `components` and nothing on the website read it, so a contact form could not host an
+ * address lookup (#561) and a marketing page could not host any provider component at all. The
+ * registry is `createProviderComponentRegistry` from `@wildo-ai/external-connectors-public/website`
+ * — keyed `capability:providerRef`, consent-gated, script-before-component and browser-only — and
+ * this file only feeds it the website's two inputs:
+ *
+ *   - the HYDRATED website provider registry (both channels joined, so a provider not live for this
+ *     website service contributes no component);
+ *   - the loaders the site's facet library contributes for components an engine provider module
+ *     declares but cannot import (the module lives in a renderer-free package), handed in through the
+ *     page bridge's `providerComponentLoaders` rather than through module-level state, because the
+ *     bridge is the website's one construction site and can carry it explicitly.
+ *
+ * Nothing is loaded here. A component loads when a `WebsiteProviderComponent` slot asks for it, from
+ * an effect — never during the Astro server render.
+ */
+import { useMemo } from 'react';
+import { collectProviderComponentRegistrations, createProviderComponentRegistry, indexProviderComponentLoaderContributions, } from '@wildo-ai/external-connectors-public/website';
+import { createFrontendWebsiteProviderRegistry, } from './frontend-provider-registry.website.js';
+function warnProviderComponentDiagnostic(diagnostic) {
+    // Reported in the BROWSER only. The registry is built during the server render or prerender too, once per
+    // page, and a declaration nothing can load would otherwise fill the build log with one warning per page
+    // for a fact the first page already stated. The browser is where somebody can see and act on it.
+    if (typeof document === 'undefined')
+        return;
+    // eslint-disable-next-line no-console
+    console.warn(`[wildo-provider-component] ${diagnostic.kind}: ${diagnostic.message}`);
+}
+/** Builds the website's provider-component registry from its live provider modules. */
+export function createWebsiteProviderComponentRegistry(input) {
+    const onDiagnostic = input.onDiagnostic ?? warnProviderComponentDiagnostic;
+    const registrations = collectProviderComponentRegistrations(input.providerRegistry?.modules.values() ?? [], {
+        contributedLoaders: indexProviderComponentLoaderContributions(input.providerComponentLoaders),
+        onDiagnostic,
+    });
+    return createProviderComponentRegistry({ registrations, onDiagnostic });
+}
+/**
+ * Builds both registries for a page bridge, MEMOISED on their inputs.
+ *
+ * Memoised because the component registry caches each loaded component: a registry rebuilt on every
+ * render would forget what it loaded, hand every slot a new registry identity, and make each slot's
+ * load effect run again — a download loop. The inputs are an island prop (`frontendProviders`, fixed
+ * for the island's life) and two module-load-time bridge dependencies, so in practice this builds
+ * once per island.
+ */
+export function useWebsiteProviderRegistries(input) {
+    const { frontendProviders, frontendProviderModules, providerComponentLoaders } = input;
+    return useMemo(() => {
+        const frontendProviderRegistry = createFrontendWebsiteProviderRegistry({
+            entries: frontendProviders,
+            modules: frontendProviderModules,
+        });
+        return {
+            frontendProviderRegistry,
+            providerComponentRegistry: createWebsiteProviderComponentRegistry({
+                providerRegistry: frontendProviderRegistry,
+                ...(providerComponentLoaders !== undefined ? { providerComponentLoaders } : {}),
+            }),
+        };
+    }, [frontendProviders, frontendProviderModules, providerComponentLoaders]);
+}
+//# sourceMappingURL=provider-component-registry.website.js.map

package/dist/esm/core/external-providers/provider-component-registry.website.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-component-registry.website.js","sourceRoot":"","sources":["../../../../src/core/external-providers/provider-component-registry.website.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,OAAO,EAAsB,MAAM,OAAO,CAAC;AACpD,OAAO,EACL,qCAAqC,EACrC,+BAA+B,EAC/B,yCAAyC,GAI1C,MAAM,8CAA8C,CAAC;AAItD,OAAO,EACL,qCAAqC,GAGtC,MAAM,sCAAsC,CAAC;AAqB9C,SAAS,+BAA+B,CAAC,UAAuC;IAC9E,0GAA0G;IAC1G,wGAAwG;IACxG,iGAAiG;IACjG,IAAI,OAAO,QAAQ,KAAK,WAAW;QAAE,OAAO;IAC5C,sCAAsC;IACtC,OAAO,CAAC,IAAI,CAAC,8BAA8B,UAAU,CAAC,IAAI,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;AACvF,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,sCAAsC,CACpD,KAAkD;IAElD,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,IAAI,+BAA+B,CAAC;IAC3E,MAAM,aAAa,GAAG,qCAAqC,CAAC,KAAK,CAAC,gBAAgB,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE;QAC1G,kBAAkB,EAAE,yCAAyC,CAAC,KAAK,CAAC,wBAAwB,CAAC;QAC7F,YAAY;KACb,CAAC,CAAC;IACH,OAAO,+BAA+B,CAA+B,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC,CAAC;AACxG,CAAC;AAQD;;;;;;;;GAQG;AACH,MAAM,UAAU,4BAA4B,CAAC,KAI5C;IACC,MAAM,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,GAAG,KAAK,CAAC;IACvF,OAAO,OAAO,CAAC,GAAG,EAAE;QAClB,MAAM,wBAAwB,GAAG,qCAAqC,CAAC;YACrE,OAAO,EAAE,iBAAiB;YAC1B,OAAO,EAAE,uBAAuB;SACjC,CAAC,CAAC;QACH,OAAO;YACL,wBAAwB;YACxB,yBAAyB,EAAE,sCAAsC,CAAC;gBAChE,gBAAgB,EAAE,wBAAwB;gBAC1C,GAAG,CAAC,wBAAwB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChF,CAAC;SACH,CAAC;IACJ,CAAC,EAAE,CAAC,iBAAiB,EAAE,uBAAuB,EAAE,wBAAwB,CAAC,CAAC,CAAC;AAC7E,CAAC","sourcesContent":["/**\n * The website's provider-component registry (#1703): the SAME registry the application builds, from\n * the SAME `components` declaration, over the website's live provider modules.\n *\n * A provider declares its components once, on its frontend module. Before this, the website facet\n * type accepted `components` and nothing on the website read it, so a contact form could not host an\n * address lookup (#561) and a marketing page could not host any provider component at all. The\n * registry is `createProviderComponentRegistry` from `@wildo-ai/external-connectors-public/website`\n * — keyed `capability:providerRef`, consent-gated, script-before-component and browser-only — and\n * this file only feeds it the website's two inputs:\n *\n *   - the HYDRATED website provider registry (both channels joined, so a provider not live for this\n *     website service contributes no component);\n *   - the loaders the site's facet library contributes for components an engine provider module\n *     declares but cannot import (the module lives in a renderer-free package), handed in through the\n *     page bridge's `providerComponentLoaders` rather than through module-level state, because the\n *     bridge is the website's one construction site and can carry it explicitly.\n *\n * Nothing is loaded here. A component loads when a `WebsiteProviderComponent` slot asks for it, from\n * an effect — never during the Astro server render.\n */\n\nimport { useMemo, type ComponentType } from 'react';\nimport {\n  collectProviderComponentRegistrations,\n  createProviderComponentRegistry,\n  indexProviderComponentLoaderContributions,\n  type ProviderComponentDiagnostic,\n  type ProviderComponentLoaderContribution,\n  type ProviderComponentRegistry,\n} from '@wildo-ai/external-connectors-public/website';\n\nimport type { FrontendProvidersBlock } from '@wildo-ai/saas-models/public-runtime';\n\nimport {\n  createFrontendWebsiteProviderRegistry,\n  type FrontendWebsiteProviderRegistry,\n  type GeneratedWebsiteProviderModules,\n} from './frontend-provider-registry.website';\n\n/** A component type the website's registry hands back once loaded. */\nexport type WebsiteProviderComponentType = ComponentType<never>;\n\n/** The website's provider-component registry: the shared registry, holding React components. */\nexport type WebsiteProviderComponentRegistry = ProviderComponentRegistry<WebsiteProviderComponentType>;\n\nexport interface CreateWebsiteProviderComponentRegistryInput {\n  /** The hydrated website provider registry; absent on a site with no providers. */\n  readonly providerRegistry: FrontendWebsiteProviderRegistry | undefined;\n  /** Loaders the site's facet library contributes for engine-declared components. */\n  readonly providerComponentLoaders?: Iterable<ProviderComponentLoaderContribution>;\n  /**\n   * Where a registration or load problem is reported. Defaults to `console.warn`: the website runtime\n   * has no logger service, and a provider component that cannot be offered is a developer-facing fact\n   * that must not be silent.\n   */\n  readonly onDiagnostic?: (diagnostic: ProviderComponentDiagnostic) => void;\n}\n\nfunction warnProviderComponentDiagnostic(diagnostic: ProviderComponentDiagnostic): void {\n  // Reported in the BROWSER only. The registry is built during the server render or prerender too, once per\n  // page, and a declaration nothing can load would otherwise fill the build log with one warning per page\n  // for a fact the first page already stated. The browser is where somebody can see and act on it.\n  if (typeof document === 'undefined') return;\n  // eslint-disable-next-line no-console\n  console.warn(`[wildo-provider-component] ${diagnostic.kind}: ${diagnostic.message}`);\n}\n\n/** Builds the website's provider-component registry from its live provider modules. */\nexport function createWebsiteProviderComponentRegistry(\n  input: CreateWebsiteProviderComponentRegistryInput,\n): WebsiteProviderComponentRegistry {\n  const onDiagnostic = input.onDiagnostic ?? warnProviderComponentDiagnostic;\n  const registrations = collectProviderComponentRegistrations(input.providerRegistry?.modules.values() ?? [], {\n    contributedLoaders: indexProviderComponentLoaderContributions(input.providerComponentLoaders),\n    onDiagnostic,\n  });\n  return createProviderComponentRegistry<WebsiteProviderComponentType>({ registrations, onDiagnostic });\n}\n\n/** What a page bridge builds once per island: the hydrated provider registry and its component registry. */\nexport interface WebsiteProviderRegistries {\n  readonly frontendProviderRegistry: FrontendWebsiteProviderRegistry;\n  readonly providerComponentRegistry: WebsiteProviderComponentRegistry;\n}\n\n/**\n * Builds both registries for a page bridge, MEMOISED on their inputs.\n *\n * Memoised because the component registry caches each loaded component: a registry rebuilt on every\n * render would forget what it loaded, hand every slot a new registry identity, and make each slot's\n * load effect run again — a download loop. The inputs are an island prop (`frontendProviders`, fixed\n * for the island's life) and two module-load-time bridge dependencies, so in practice this builds\n * once per island.\n */\nexport function useWebsiteProviderRegistries(input: {\n  readonly frontendProviders: FrontendProvidersBlock | undefined;\n  readonly frontendProviderModules: GeneratedWebsiteProviderModules | undefined;\n  readonly providerComponentLoaders: Iterable<ProviderComponentLoaderContribution> | undefined;\n}): WebsiteProviderRegistries {\n  const { frontendProviders, frontendProviderModules, providerComponentLoaders } = input;\n  return useMemo(() => {\n    const frontendProviderRegistry = createFrontendWebsiteProviderRegistry({\n      entries: frontendProviders,\n      modules: frontendProviderModules,\n    });\n    return {\n      frontendProviderRegistry,\n      providerComponentRegistry: createWebsiteProviderComponentRegistry({\n        providerRegistry: frontendProviderRegistry,\n        ...(providerComponentLoaders !== undefined ? { providerComponentLoaders } : {}),\n      }),\n    };\n  }, [frontendProviders, frontendProviderModules, providerComponentLoaders]);\n}\n"]}

package/dist/esm/core/external-providers/useWebsiteProviderComponent.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Reading provider-contributed components on the website (#1703) — the website's counterpart of the
+ * application's `useProviderComponentChoices` / `useProviderComponent`, over the same registry and
+ * the same status vocabulary (`ProviderComponentStatus`).
+ *
+ * Two differences from the application, both about WHO answers:
+ *
+ *   - the consent grant is the VISITOR's decision from `WebsiteConsentContext`, not a signed-in
+ *     person's stored preference;
+ *   - nothing starts before that decision has been read from storage (`isResolved`). The server render
+ *     and the first client render read no storage, and asking the registry then would report a
+ *     consent-required state to a visitor who already agreed, flashing the refusal on every page.
+ *
+ * Neither hook picks a provider: when several providers offer a component for one capability,
+ * choosing is the page's job.
+ */
+import { type ProviderComponentLoadState } from '@wildo-ai/external-connectors-public/website';
+import type { ProviderCapability } from '@wildo-ai/saas-models/public-runtime';
+import type { WebsiteProviderComponentType } from './provider-component-registry.website';
+/** What `useWebsiteProviderComponent` returns: the shared load state, holding a React component. */
+export type WebsiteProviderComponentState = ProviderComponentLoadState<WebsiteProviderComponentType>;
+/**
+ * The providers that are BOTH live for this website service and carry a component for this
+ * capability, in the order the service declared them. Synchronous, so a page can render its choice
+ * on the first frame.
+ */
+export declare function useWebsiteProviderComponentChoices(capability: ProviderCapability): ReadonlyArray<string>;
+/**
+ * Loads one provider's component for a capability, once the visitor's consent decision is known.
+ *
+ * Pass `undefined` for the ref while nothing is chosen. The load runs in an effect, so it never runs
+ * during the Astro server render; `CONSENT_REQUIRED` means nothing of the provider was downloaded,
+ * and granting the missing purposes through the consent panel loads it without a re-mount.
+ */
+export declare function useWebsiteProviderComponent(capability: ProviderCapability, providerRef: string | undefined): WebsiteProviderComponentState;
+//# sourceMappingURL=useWebsiteProviderComponent.d.ts.map

package/dist/esm/core/external-providers/useWebsiteProviderComponent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useWebsiteProviderComponent.d.ts","sourceRoot":"","sources":["../../../../src/core/external-providers/useWebsiteProviderComponent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,EAGL,KAAK,0BAA0B,EAChC,MAAM,8CAA8C,CAAC;AACtD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAI/E,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AAE1F,oGAAoG;AACpG,MAAM,MAAM,6BAA6B,GAAG,0BAA0B,CAAC,4BAA4B,CAAC,CAAC;AAErG;;;;GAIG;AACH,wBAAgB,kCAAkC,CAAC,UAAU,EAAE,kBAAkB,GAAG,aAAa,CAAC,MAAM,CAAC,CAGxG;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CACzC,UAAU,EAAE,kBAAkB,EAC9B,WAAW,EAAE,MAAM,GAAG,SAAS,GAC9B,6BAA6B,CAuB/B"}

package/dist/esm/core/external-providers/useWebsiteProviderComponent.js

@@ -0,0 +1,59 @@
+/**
+ * Reading provider-contributed components on the website (#1703) — the website's counterpart of the
+ * application's `useProviderComponentChoices` / `useProviderComponent`, over the same registry and
+ * the same status vocabulary (`ProviderComponentStatus`).
+ *
+ * Two differences from the application, both about WHO answers:
+ *
+ *   - the consent grant is the VISITOR's decision from `WebsiteConsentContext`, not a signed-in
+ *     person's stored preference;
+ *   - nothing starts before that decision has been read from storage (`isResolved`). The server render
+ *     and the first client render read no storage, and asking the registry then would report a
+ *     consent-required state to a visitor who already agreed, flashing the refusal on every page.
+ *
+ * Neither hook picks a provider: when several providers offer a component for one capability,
+ * choosing is the page's job.
+ */
+import { useEffect, useState } from 'react';
+import { idleProviderComponentLoadState, startProviderComponentLoad, } from '@wildo-ai/external-connectors-public/website';
+import { useWebsiteConsent } from '../consent/useWebsiteConsent.js';
+import { useWebsiteRuntime } from '../contexts/useWebsiteRuntime.js';
+/**
+ * The providers that are BOTH live for this website service and carry a component for this
+ * capability, in the order the service declared them. Synchronous, so a page can render its choice
+ * on the first frame.
+ */
+export function useWebsiteProviderComponentChoices(capability) {
+    const { providerComponentRegistry } = useWebsiteRuntime();
+    return providerComponentRegistry?.listProviders(capability) ?? [];
+}
+/**
+ * Loads one provider's component for a capability, once the visitor's consent decision is known.
+ *
+ * Pass `undefined` for the ref while nothing is chosen. The load runs in an effect, so it never runs
+ * during the Astro server render; `CONSENT_REQUIRED` means nothing of the provider was downloaded,
+ * and granting the missing purposes through the consent panel loads it without a re-mount.
+ */
+export function useWebsiteProviderComponent(capability, providerRef) {
+    const { providerComponentRegistry } = useWebsiteRuntime();
+    const consent = useWebsiteConsent();
+    const grantedKey = [...consent.grantedPurposes].sort().join(',');
+    const [state, setState] = useState(() => idleProviderComponentLoadState());
+    useEffect(() => {
+        if (!consent.isResolved) {
+            setState(idleProviderComponentLoadState());
+            return undefined;
+        }
+        return startProviderComponentLoad({
+            registry: providerComponentRegistry,
+            capability,
+            providerRef,
+            grantedConsentPurposes: consent.grantedPurposes,
+            onState: setState,
+        });
+        // `grantedPurposes` is read through `grantedKey`: keyed by the granted SET, not the array's identity.
+        // eslint-disable-next-line react-hooks/exhaustive-deps
+    }, [capability, providerRef, providerComponentRegistry, consent.isResolved, grantedKey]);
+    return state;
+}
+//# sourceMappingURL=useWebsiteProviderComponent.js.map

package/dist/esm/core/external-providers/useWebsiteProviderComponent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useWebsiteProviderComponent.js","sourceRoot":"","sources":["../../../../src/core/external-providers/useWebsiteProviderComponent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAC5C,OAAO,EACL,8BAA8B,EAC9B,0BAA0B,GAE3B,MAAM,8CAA8C,CAAC;AAGtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAMlE;;;;GAIG;AACH,MAAM,UAAU,kCAAkC,CAAC,UAA8B;IAC/E,MAAM,EAAE,yBAAyB,EAAE,GAAG,iBAAiB,EAAE,CAAC;IAC1D,OAAO,yBAAyB,EAAE,aAAa,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;AACpE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CACzC,UAA8B,EAC9B,WAA+B;IAE/B,MAAM,EAAE,yBAAyB,EAAE,GAAG,iBAAiB,EAAE,CAAC;IAC1D,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;IACpC,MAAM,UAAU,GAAG,CAAC,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjE,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgC,GAAG,EAAE,CAAC,8BAA8B,EAAgC,CAAC,CAAC;IAExI,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;YACxB,QAAQ,CAAC,8BAA8B,EAAgC,CAAC,CAAC;YACzE,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,0BAA0B,CAAC;YAChC,QAAQ,EAAE,yBAAyB;YACnC,UAAU;YACV,WAAW;YACX,sBAAsB,EAAE,OAAO,CAAC,eAAe;YAC/C,OAAO,EAAE,QAAQ;SAClB,CAAC,CAAC;QACH,sGAAsG;QACtG,uDAAuD;IACzD,CAAC,EAAE,CAAC,UAAU,EAAE,WAAW,EAAE,yBAAyB,EAAE,OAAO,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;IAEzF,OAAO,KAAK,CAAC;AACf,CAAC","sourcesContent":["/**\n * Reading provider-contributed components on the website (#1703) — the website's counterpart of the\n * application's `useProviderComponentChoices` / `useProviderComponent`, over the same registry and\n * the same status vocabulary (`ProviderComponentStatus`).\n *\n * Two differences from the application, both about WHO answers:\n *\n *   - the consent grant is the VISITOR's decision from `WebsiteConsentContext`, not a signed-in\n *     person's stored preference;\n *   - nothing starts before that decision has been read from storage (`isResolved`). The server render\n *     and the first client render read no storage, and asking the registry then would report a\n *     consent-required state to a visitor who already agreed, flashing the refusal on every page.\n *\n * Neither hook picks a provider: when several providers offer a component for one capability,\n * choosing is the page's job.\n */\n\nimport { useEffect, useState } from 'react';\nimport {\n  idleProviderComponentLoadState,\n  startProviderComponentLoad,\n  type ProviderComponentLoadState,\n} from '@wildo-ai/external-connectors-public/website';\nimport type { ProviderCapability } from '@wildo-ai/saas-models/public-runtime';\n\nimport { useWebsiteConsent } from '../consent/useWebsiteConsent';\nimport { useWebsiteRuntime } from '../contexts/useWebsiteRuntime';\nimport type { WebsiteProviderComponentType } from './provider-component-registry.website';\n\n/** What `useWebsiteProviderComponent` returns: the shared load state, holding a React component. */\nexport type WebsiteProviderComponentState = ProviderComponentLoadState<WebsiteProviderComponentType>;\n\n/**\n * The providers that are BOTH live for this website service and carry a component for this\n * capability, in the order the service declared them. Synchronous, so a page can render its choice\n * on the first frame.\n */\nexport function useWebsiteProviderComponentChoices(capability: ProviderCapability): ReadonlyArray<string> {\n  const { providerComponentRegistry } = useWebsiteRuntime();\n  return providerComponentRegistry?.listProviders(capability) ?? [];\n}\n\n/**\n * Loads one provider's component for a capability, once the visitor's consent decision is known.\n *\n * Pass `undefined` for the ref while nothing is chosen. The load runs in an effect, so it never runs\n * during the Astro server render; `CONSENT_REQUIRED` means nothing of the provider was downloaded,\n * and granting the missing purposes through the consent panel loads it without a re-mount.\n */\nexport function useWebsiteProviderComponent(\n  capability: ProviderCapability,\n  providerRef: string | undefined,\n): WebsiteProviderComponentState {\n  const { providerComponentRegistry } = useWebsiteRuntime();\n  const consent = useWebsiteConsent();\n  const grantedKey = [...consent.grantedPurposes].sort().join(',');\n  const [state, setState] = useState<WebsiteProviderComponentState>(() => idleProviderComponentLoadState<WebsiteProviderComponentType>());\n\n  useEffect(() => {\n    if (!consent.isResolved) {\n      setState(idleProviderComponentLoadState<WebsiteProviderComponentType>());\n      return undefined;\n    }\n    return startProviderComponentLoad({\n      registry: providerComponentRegistry,\n      capability,\n      providerRef,\n      grantedConsentPurposes: consent.grantedPurposes,\n      onState: setState,\n    });\n    // `grantedPurposes` is read through `grantedKey`: keyed by the granted SET, not the array's identity.\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n  }, [capability, providerRef, providerComponentRegistry, consent.isResolved, grantedKey]);\n\n  return state;\n}\n"]}

package/dist/esm/core/external-providers/useWebsiteProviderScripts.d.ts

@@ -32,13 +32,23 @@
  */
 import { type ConsentPurpose } from '@wildo-ai/saas-models/public-runtime';
 import type { FrontendWebsiteProviderRegistry } from './frontend-provider-registry.website';
+import type { WebsiteProviderComponentRegistry } from './provider-component-registry.website';
+import type { WebsiteProviderSdkActivation } from './website-provider-sdk-activations';
+/**
+ * Injects the `<script>` tags of the live providers that rest on NO consent purpose and render no component.
+ *
+ * No consent input, deliberately (#1704): an executed `<script>` cannot be stopped, so a provider that rests on a
+ * purpose must ship as a stoppable SDK (started on the grant and stopped on withdrawal by
+ * {@link useWebsiteProviderSdks}); a consent-based module declaring `scripts` is refused at projection and skipped by
+ * the collector. No grant could change what this injects.
+ */
 export declare function useWebsiteProviderScripts(registry: FrontendWebsiteProviderRegistry | undefined, 
 /**
- * The purposes the visitor granted (#534). A provider resting on an ungranted purpose injects nothing;
- * granting it later injects its script then. A withdrawal cannot remove an executed script, so it takes
- * effect on the next page load.
+ * The website's provider-component registry (#1703). A provider with a registered component loads its
+ * scripts WITH that component, when a page first shows it — so an address lookup's vendor loader is
+ * not downloaded on every page of the site, only on the one with the form. This hook injects the rest.
  */
-grantedConsentPurposes: readonly ConsentPurpose[]): void;
+componentRegistry?: WebsiteProviderComponentRegistry): void;
 /**
  * Loads and starts the npm SDK of every live provider that declares one.
  *
@@ -53,5 +63,5 @@ export declare function useWebsiteProviderSdks(registry: FrontendWebsiteProvider
  * change, while the consent-based ones start when their purpose is granted and are DEACTIVATED when it
  * is withdrawn — which is the only way a withdrawal stops a running analytics client.
  */
-grantedConsentPurposes: readonly ConsentPurpose[]): void;
+grantedConsentPurposes: readonly ConsentPurpose[]): ReadonlyArray<WebsiteProviderSdkActivation>;
 //# sourceMappingURL=useWebsiteProviderScripts.d.ts.map

package/dist/esm/core/external-providers/useWebsiteProviderScripts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useWebsiteProviderScripts.d.ts","sourceRoot":"","sources":["../../../../../src/core/external-providers/useWebsiteProviderScripts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAUH,OAAO,EAAmB,KAAK,cAAc,EAAE,MAAM,sCAAsC,CAAC;AAC5F,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,sCAAsC,CAAC;AAU5F,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,+BAA+B,GAAG,SAAS;AACrD;;;;GAIG;AACH,sBAAsB,EAAE,SAAS,cAAc,EAAE,GAChD,IAAI,CAeN;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,+BAA+B,GAAG,SAAS;AACrD;;;;;GAKG;AACH,sBAAsB,EAAE,SAAS,cAAc,EAAE,GAChD,IAAI,CAGN"}
+{"version":3,"file":"useWebsiteProviderScripts.d.ts","sourceRoot":"","sources":["../../../../src/core/external-providers/useWebsiteProviderScripts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAUH,OAAO,EAAmB,KAAK,cAAc,EAAE,MAAM,sCAAsC,CAAC;AAC5F,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,sCAAsC,CAAC;AAC5F,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,uCAAuC,CAAC;AAC9F,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AAUvF;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,+BAA+B,GAAG,SAAS;AACrD;;;;GAIG;AACH,iBAAiB,CAAC,EAAE,gCAAgC,GACnD,IAAI,CAcN;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,+BAA+B,GAAG,SAAS;AACrD;;;;;GAKG;AACH,sBAAsB,EAAE,SAAS,cAAc,EAAE,GAChD,aAAa,CAAC,4BAA4B,CAAC,CAM7C"}

package/dist/esm/core/external-providers/useWebsiteProviderScripts.js

@@ -30,8 +30,8 @@
  * one build correct everywhere, at the cost of the tag arriving after hydration.
  * Revisit if a provider ever needs to run before first paint.
  */
-import { useEffect } from 'react';
-import { activateFrontendProviderSdks, collectDeclaredProviderScripts, consentPurposesRequiredByProvider, injectProviderScripts, } from '@wildo-ai/external-connectors-public/website';
+import { useEffect, useMemo, useRef, useState } from 'react';
+import { activateFrontendProviderSdks, collectProviderScriptsWithoutComponents, consentPurposesRequiredByProvider, createFrontendProviderSdkActivationLane, injectProviderScripts, } from '@wildo-ai/external-connectors-public/website';
 import { AppFrontendType } from '@wildo-ai/saas-models/public-runtime';
 /**
  * A stable key for a granted-purpose set, so an effect re-runs when the SET changes and not when a new
@@ -40,18 +40,26 @@ import { AppFrontendType } from '@wildo-ai/saas-models/public-runtime';
 function grantedKey(grantedConsentPurposes) {
     return [...grantedConsentPurposes].sort().join(',');
 }
+/**
+ * Injects the `<script>` tags of the live providers that rest on NO consent purpose and render no component.
+ *
+ * No consent input, deliberately (#1704): an executed `<script>` cannot be stopped, so a provider that rests on a
+ * purpose must ship as a stoppable SDK (started on the grant and stopped on withdrawal by
+ * {@link useWebsiteProviderSdks}); a consent-based module declaring `scripts` is refused at projection and skipped by
+ * the collector. No grant could change what this injects.
+ */
 export function useWebsiteProviderScripts(registry, 
 /**
- * The purposes the visitor granted (#534). A provider resting on an ungranted purpose injects nothing;
- * granting it later injects its script then. A withdrawal cannot remove an executed script, so it takes
- * effect on the next page load.
+ * The website's provider-component registry (#1703). A provider with a registered component loads its
+ * scripts WITH that component, when a page first shows it — so an address lookup's vendor loader is
+ * not downloaded on every page of the site, only on the one with the form. This hook injects the rest.
  */
-grantedConsentPurposes) {
-    const key = grantedKey(grantedConsentPurposes);
+componentRegistry) {
     useEffect(() => {
         if (typeof document === 'undefined')
             return;
-        const scripts = collectDeclaredProviderScripts(registry?.modules.values(), grantedConsentPurposes);
+        const withComponents = [...(componentRegistry?.providersWithComponents() ?? [])].map((providerRef) => ({ providerRef }));
+        const scripts = collectProviderScriptsWithoutComponents(registry?.modules.values() ?? [], withComponents);
         if (scripts.length === 0)
             return;
         injectProviderScripts(scripts, document);
@@ -59,8 +67,7 @@ grantedConsentPurposes) {
         // work immediately; removing the element undoes neither, so a cleanup that
         // removed it would only make the next mount inject a SECOND copy of an
         // already-running script. Idempotence by `src` is the real guard.
-        // eslint-disable-next-line react-hooks/exhaustive-deps -- keyed by the granted SET, see grantedKey.
-    }, [registry, key]);
+    }, [registry, componentRegistry]);
 }
 /**
  * Loads and starts the npm SDK of every live provider that declares one.
@@ -77,10 +84,14 @@ export function useWebsiteProviderSdks(registry,
  * is withdrawn — which is the only way a withdrawal stops a running analytics client.
  */
 grantedConsentPurposes) {
-    useProviderSdkGroup(registry, false, []);
-    useProviderSdkGroup(registry, true, grantedConsentPurposes);
+    const consentFree = useProviderSdkGroup(registry, false, []);
+    const consentBased = useProviderSdkGroup(registry, true, grantedConsentPurposes);
+    // The providers RUNNING on this page, both groups, published by the page layout (#1735): a form reads the captcha
+    // vendor's handle from here. Emptied the moment a group stops, so nothing holds a handle past a withdrawal.
+    return useMemo(() => [...consentFree, ...consentBased], [consentFree, consentBased]);
 }
 function useProviderSdkGroup(registry, consentBased, grantedConsentPurposes) {
+    const [running, setRunning] = useState([]);
     // Keyed by the grants this group's providers actually rest on, so changing an unrelated purpose does
     // not stop and restart a running analytics client.
     const relevant = registry === undefined
@@ -90,15 +101,18 @@ function useProviderSdkGroup(registry, consentBased, grantedConsentPurposes) {
             .flatMap((module) => consentPurposesRequiredByProvider(module))
             .filter((purpose) => grantedConsentPurposes.includes(purpose));
     const key = grantedKey(relevant);
+    // One lane per group for the page's lifetime: a start waits for the previous stop.
+    const lane = useRef(createFrontendProviderSdkActivationLane());
     useEffect(() => {
         if (registry === undefined)
             return;
         const modules = [...registry.modules.values()].filter((module) => (consentPurposesRequiredByProvider(module).length > 0) === consentBased);
         if (modules.length === 0)
             return;
-        let unmounted = false;
-        let activated;
-        void activateFrontendProviderSdks({
+        // Through the group's lane, so a start never overlaps the previous stop of the same page-global vendor (#1704): a
+        // visitor who grants, withdraws and grants again while the bundle downloads must not have the first run's stop
+        // switch off the second run's client. The stop also covers an unmount mid-download.
+        const stop = lane.current.start(() => activateFrontendProviderSdks({
             surface: AppFrontendType.STATIC_WEBSITE,
             modules,
             grantedConsentPurposes,
@@ -108,19 +122,20 @@ function useProviderSdkGroup(registry, consentBased, grantedConsentPurposes) {
                 // eslint-disable-next-line no-console
                 console.warn(`[wildo-provider-sdk] ${diagnostic.kind}: ${diagnostic.message}`);
             },
-        }).then((result) => {
-            activated = result;
-            // Activation is asynchronous and unmount is not: if the surface went away
-            // while a vendor bundle was still downloading, stop what we just started
-            // rather than leaving a client nobody can reach.
-            if (unmounted)
-                void result.deactivateAll();
+        }), (result) => {
+            setRunning(modules.flatMap((module) => {
+                const activation = result.activations.get(module.metadata.ref);
+                return activation === undefined
+                    ? []
+                    : [{ providerRef: module.metadata.ref, providerCapabilities: [...module.providerCapabilities], activation }];
+            }));
         });
         return () => {
-            unmounted = true;
-            void activated?.deactivateAll();
+            setRunning([]);
+            stop();
         };
         // eslint-disable-next-line react-hooks/exhaustive-deps -- keyed by the granted SET, see grantedKey.
     }, [registry, consentBased, key]);
+    return running;
 }
 //# sourceMappingURL=useWebsiteProviderScripts.js.map

package/dist/esm/core/external-providers/useWebsiteProviderScripts.js.map

@@ -1 +1 @@
-{"version":3,"file":"useWebsiteProviderScripts.js","sourceRoot":"","sources":["../../../../../src/core/external-providers/useWebsiteProviderScripts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAClC,OAAO,EACL,4BAA4B,EAC5B,8BAA8B,EAC9B,iCAAiC,EACjC,qBAAqB,GAEtB,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAAE,eAAe,EAAuB,MAAM,sCAAsC,CAAC;AAG5F;;;GAGG;AACH,SAAS,UAAU,CAAC,sBAAiD;IACnE,OAAO,CAAC,GAAG,sBAAsB,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,QAAqD;AACrD;;;;GAIG;AACH,sBAAiD;IAEjD,MAAM,GAAG,GAAG,UAAU,CAAC,sBAAsB,CAAC,CAAC;IAC/C,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,OAAO,QAAQ,KAAK,WAAW;YAAE,OAAO;QAE5C,MAAM,OAAO,GAAG,8BAA8B,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC;QACnG,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAEjC,qBAAqB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACzC,4EAA4E;QAC5E,2EAA2E;QAC3E,uEAAuE;QACvE,kEAAkE;QAClE,oGAAoG;IACtG,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;AACtB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAAqD;AACrD;;;;;GAKG;AACH,sBAAiD;IAEjD,mBAAmB,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;IACzC,mBAAmB,CAAC,QAAQ,EAAE,IAAI,EAAE,sBAAsB,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,mBAAmB,CAC1B,QAAqD,EACrD,YAAqB,EACrB,sBAAiD;IAEjD,qGAAqG;IACrG,mDAAmD;IACnD,MAAM,QAAQ,GAAG,QAAQ,KAAK,SAAS;QACrC,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;aAC7B,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,iCAAiC,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,YAAY,CAAC;aAC3F,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,iCAAiC,CAAC,MAAM,CAAC,CAAC;aAC9D,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,sBAAsB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IACnE,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACjC,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO;QACnC,MAAM,OAAO,GAAG,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CACnD,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,iCAAiC,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,YAAY,CACpF,CAAC;QACF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAEjC,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,SAAoD,CAAC;QAEzD,KAAK,4BAA4B,CAAC;YAChC,OAAO,EAAE,eAAe,CAAC,cAAc;YACvC,OAAO;YACP,sBAAsB;YACtB,YAAY,EAAE,CAAC,UAAU,EAAE,EAAE;gBAC3B,wEAAwE;gBACxE,4DAA4D;gBAC5D,sCAAsC;gBACtC,OAAO,CAAC,IAAI,CAAC,wBAAwB,UAAU,CAAC,IAAI,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;YACjF,CAAC;SACF,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACjB,SAAS,GAAG,MAAM,CAAC;YACnB,0EAA0E;YAC1E,yEAAyE;YACzE,iDAAiD;YACjD,IAAI,SAAS;gBAAE,KAAK,MAAM,CAAC,aAAa,EAAE,CAAC;QAC7C,CAAC,CAAC,CAAC;QAEH,OAAO,GAAG,EAAE;YACV,SAAS,GAAG,IAAI,CAAC;YACjB,KAAK,SAAS,EAAE,aAAa,EAAE,CAAC;QAClC,CAAC,CAAC;QACF,oGAAoG;IACtG,CAAC,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC;AACpC,CAAC","sourcesContent":["/**\n * The website's executable-surface hooks: load what the live providers declared.\n *\n * Two mechanisms, one per kind of vendor. `useWebsiteProviderScripts` adds the\n * `<script>` tags a provider declared — the case a dynamic `import()` cannot\n * serve, and the dominant one on a marketing site. `useWebsiteProviderSdks`\n * activates the npm SDK of any provider that ships one, which reaches this\n * bundle through the CODE channel.\n *\n * Both are effect-only, and that is not incidental: this is an Astro site, so\n * page modules execute in Node at build time. Injecting into a document that\n * does not exist would throw, and starting a vendor SDK there would run a live\n * analytics client inside a build.\n *\n * Both come from `@wildo-ai/external-connectors-public/website`. The script\n * injector lives there rather than here so the SaaS application, the technical\n * doc and this site run ONE copy of it: a second copy of a DOM mutation\n * eventually disagrees about idempotence, which is how a vendor tag gets loaded\n * twice. It first shipped here alone, and that is how the application came to\n * declare its Drive Picker's Google API script and never inject it.\n *\n * ## Client-side injection, and the alternative that was rejected\n *\n * This is an Astro static site, so the \"obvious\" home for a third-party tag is\n * the built HTML `<head>`. That was rejected for now: the set of live providers\n * is per SERVICE and per ENVIRONMENT, resolved from the materialized artifact,\n * while the built HTML is one artifact shared across deploys of the same build.\n * Baking the tags in would make the build environment-specific — the same class\n * of coupling the DATA channel exists to avoid. Injecting from the client keeps\n * one build correct everywhere, at the cost of the tag arriving after hydration.\n * Revisit if a provider ever needs to run before first paint.\n */\n\nimport { useEffect } from 'react';\nimport {\n  activateFrontendProviderSdks,\n  collectDeclaredProviderScripts,\n  consentPurposesRequiredByProvider,\n  injectProviderScripts,\n  type ActivatedFrontendProviderSdks,\n} from '@wildo-ai/external-connectors-public/website';\nimport { AppFrontendType, type ConsentPurpose } from '@wildo-ai/saas-models/public-runtime';\nimport type { FrontendWebsiteProviderRegistry } from './frontend-provider-registry.website';\n\n/**\n * A stable key for a granted-purpose set, so an effect re-runs when the SET changes and not when a new\n * array with the same members is handed in.\n */\nfunction grantedKey(grantedConsentPurposes: readonly ConsentPurpose[]): string {\n  return [...grantedConsentPurposes].sort().join(',');\n}\n\nexport function useWebsiteProviderScripts(\n  registry: FrontendWebsiteProviderRegistry | undefined,\n  /**\n   * The purposes the visitor granted (#534). A provider resting on an ungranted purpose injects nothing;\n   * granting it later injects its script then. A withdrawal cannot remove an executed script, so it takes\n   * effect on the next page load.\n   */\n  grantedConsentPurposes: readonly ConsentPurpose[],\n): void {\n  const key = grantedKey(grantedConsentPurposes);\n  useEffect(() => {\n    if (typeof document === 'undefined') return;\n\n    const scripts = collectDeclaredProviderScripts(registry?.modules.values(), grantedConsentPurposes);\n    if (scripts.length === 0) return;\n\n    injectProviderScripts(scripts, document);\n    // Deliberately no teardown. A vendor tag installs a global and often starts\n    // work immediately; removing the element undoes neither, so a cleanup that\n    // removed it would only make the next mount inject a SECOND copy of an\n    // already-running script. Idempotence by `src` is the real guard.\n    // eslint-disable-next-line react-hooks/exhaustive-deps -- keyed by the granted SET, see grantedKey.\n  }, [registry, key]);\n}\n\n/**\n * Loads and starts the npm SDK of every live provider that declares one.\n *\n * Unlike a script tag, an SDK activation IS undone on unmount where the vendor\n * offers a teardown — an analytics client that cannot be stopped cannot honour\n * a consent withdrawal, and accumulates one instance per view transition.\n */\nexport function useWebsiteProviderSdks(\n  registry: FrontendWebsiteProviderRegistry | undefined,\n  /**\n   * The purposes the visitor granted (#534). Providers are activated in TWO groups on purpose: those that\n   * rest on no purpose (error monitoring, captcha) are started once and never restarted by a consent\n   * change, while the consent-based ones start when their purpose is granted and are DEACTIVATED when it\n   * is withdrawn — which is the only way a withdrawal stops a running analytics client.\n   */\n  grantedConsentPurposes: readonly ConsentPurpose[],\n): void {\n  useProviderSdkGroup(registry, false, []);\n  useProviderSdkGroup(registry, true, grantedConsentPurposes);\n}\n\nfunction useProviderSdkGroup(\n  registry: FrontendWebsiteProviderRegistry | undefined,\n  consentBased: boolean,\n  grantedConsentPurposes: readonly ConsentPurpose[],\n): void {\n  // Keyed by the grants this group's providers actually rest on, so changing an unrelated purpose does\n  // not stop and restart a running analytics client.\n  const relevant = registry === undefined\n    ? []\n    : [...registry.modules.values()]\n      .filter((module) => (consentPurposesRequiredByProvider(module).length > 0) === consentBased)\n      .flatMap((module) => consentPurposesRequiredByProvider(module))\n      .filter((purpose) => grantedConsentPurposes.includes(purpose));\n  const key = grantedKey(relevant);\n  useEffect(() => {\n    if (registry === undefined) return;\n    const modules = [...registry.modules.values()].filter(\n      (module) => (consentPurposesRequiredByProvider(module).length > 0) === consentBased,\n    );\n    if (modules.length === 0) return;\n\n    let unmounted = false;\n    let activated: ActivatedFrontendProviderSdks | undefined;\n\n    void activateFrontendProviderSdks({\n      surface: AppFrontendType.STATIC_WEBSITE,\n      modules,\n      grantedConsentPurposes,\n      onDiagnostic: (diagnostic) => {\n        // The website runtime has no logger service, and a provider that cannot\n        // start is a developer-facing fact that must not be silent.\n        // eslint-disable-next-line no-console\n        console.warn(`[wildo-provider-sdk] ${diagnostic.kind}: ${diagnostic.message}`);\n      },\n    }).then((result) => {\n      activated = result;\n      // Activation is asynchronous and unmount is not: if the surface went away\n      // while a vendor bundle was still downloading, stop what we just started\n      // rather than leaving a client nobody can reach.\n      if (unmounted) void result.deactivateAll();\n    });\n\n    return () => {\n      unmounted = true;\n      void activated?.deactivateAll();\n    };\n    // eslint-disable-next-line react-hooks/exhaustive-deps -- keyed by the granted SET, see grantedKey.\n  }, [registry, consentBased, key]);\n}\n"]}
+{"version":3,"file":"useWebsiteProviderScripts.js","sourceRoot":"","sources":["../../../../src/core/external-providers/useWebsiteProviderScripts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAC7D,OAAO,EACL,4BAA4B,EAC5B,uCAAuC,EACvC,iCAAiC,EACjC,uCAAuC,EACvC,qBAAqB,GACtB,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAAE,eAAe,EAAuB,MAAM,sCAAsC,CAAC;AAK5F;;;GAGG;AACH,SAAS,UAAU,CAAC,sBAAiD;IACnE,OAAO,CAAC,GAAG,sBAAsB,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACtD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB,CACvC,QAAqD;AACrD;;;;GAIG;AACH,iBAAoD;IAEpD,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,OAAO,QAAQ,KAAK,WAAW;YAAE,OAAO;QAE5C,MAAM,cAAc,GAAG,CAAC,GAAG,CAAC,iBAAiB,EAAE,uBAAuB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;QACzH,MAAM,OAAO,GAAG,uCAAuC,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,cAAc,CAAC,CAAC;QAC1G,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAEjC,qBAAqB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACzC,4EAA4E;QAC5E,2EAA2E;QAC3E,uEAAuE;QACvE,kEAAkE;IACpE,CAAC,EAAE,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC,CAAC;AACpC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAAqD;AACrD;;;;;GAKG;AACH,sBAAiD;IAEjD,MAAM,WAAW,GAAG,mBAAmB,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;IAC7D,MAAM,YAAY,GAAG,mBAAmB,CAAC,QAAQ,EAAE,IAAI,EAAE,sBAAsB,CAAC,CAAC;IACjF,kHAAkH;IAClH,4GAA4G;IAC5G,OAAO,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,WAAW,EAAE,GAAG,YAAY,CAAC,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,mBAAmB,CAC1B,QAAqD,EACrD,YAAqB,EACrB,sBAAiD;IAEjD,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAA8C,EAAE,CAAC,CAAC;IACxF,qGAAqG;IACrG,mDAAmD;IACnD,MAAM,QAAQ,GAAG,QAAQ,KAAK,SAAS;QACrC,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;aAC7B,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,iCAAiC,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,YAAY,CAAC;aAC3F,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,iCAAiC,CAAC,MAAM,CAAC,CAAC;aAC9D,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,sBAAsB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IACnE,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACjC,mFAAmF;IACnF,MAAM,IAAI,GAAG,MAAM,CAAC,uCAAuC,EAAE,CAAC,CAAC;IAC/D,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO;QACnC,MAAM,OAAO,GAAG,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CACnD,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,iCAAiC,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,YAAY,CACpF,CAAC;QACF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAEjC,kHAAkH;QAClH,+GAA+G;QAC/G,oFAAoF;QACpF,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAC7B,GAAG,EAAE,CAAC,4BAA4B,CAAC;YACjC,OAAO,EAAE,eAAe,CAAC,cAAc;YACvC,OAAO;YACP,sBAAsB;YACtB,YAAY,EAAE,CAAC,UAAU,EAAE,EAAE;gBAC3B,wEAAwE;gBACxE,4DAA4D;gBAC5D,sCAAsC;gBACtC,OAAO,CAAC,IAAI,CAAC,wBAAwB,UAAU,CAAC,IAAI,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;YACjF,CAAC;SACF,CAAC,EACF,CAAC,MAAM,EAAE,EAAE;YACT,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;gBACpC,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAC/D,OAAO,UAAU,KAAK,SAAS;oBAC7B,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,oBAAoB,EAAE,CAAC,GAAG,MAAM,CAAC,oBAAoB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;YACjH,CAAC,CAAC,CAAC,CAAC;QACN,CAAC,CACF,CAAC;QACF,OAAO,GAAG,EAAE;YACV,UAAU,CAAC,EAAE,CAAC,CAAC;YACf,IAAI,EAAE,CAAC;QACT,CAAC,CAAC;QACF,oGAAoG;IACtG,CAAC,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC;IAClC,OAAO,OAAO,CAAC;AACjB,CAAC","sourcesContent":["/**\n * The website's executable-surface hooks: load what the live providers declared.\n *\n * Two mechanisms, one per kind of vendor. `useWebsiteProviderScripts` adds the\n * `<script>` tags a provider declared — the case a dynamic `import()` cannot\n * serve, and the dominant one on a marketing site. `useWebsiteProviderSdks`\n * activates the npm SDK of any provider that ships one, which reaches this\n * bundle through the CODE channel.\n *\n * Both are effect-only, and that is not incidental: this is an Astro site, so\n * page modules execute in Node at build time. Injecting into a document that\n * does not exist would throw, and starting a vendor SDK there would run a live\n * analytics client inside a build.\n *\n * Both come from `@wildo-ai/external-connectors-public/website`. The script\n * injector lives there rather than here so the SaaS application, the technical\n * doc and this site run ONE copy of it: a second copy of a DOM mutation\n * eventually disagrees about idempotence, which is how a vendor tag gets loaded\n * twice. It first shipped here alone, and that is how the application came to\n * declare its Drive Picker's Google API script and never inject it.\n *\n * ## Client-side injection, and the alternative that was rejected\n *\n * This is an Astro static site, so the \"obvious\" home for a third-party tag is\n * the built HTML `<head>`. That was rejected for now: the set of live providers\n * is per SERVICE and per ENVIRONMENT, resolved from the materialized artifact,\n * while the built HTML is one artifact shared across deploys of the same build.\n * Baking the tags in would make the build environment-specific — the same class\n * of coupling the DATA channel exists to avoid. Injecting from the client keeps\n * one build correct everywhere, at the cost of the tag arriving after hydration.\n * Revisit if a provider ever needs to run before first paint.\n */\n\nimport { useEffect, useMemo, useRef, useState } from 'react';\nimport {\n  activateFrontendProviderSdks,\n  collectProviderScriptsWithoutComponents,\n  consentPurposesRequiredByProvider,\n  createFrontendProviderSdkActivationLane,\n  injectProviderScripts,\n} from '@wildo-ai/external-connectors-public/website';\nimport { AppFrontendType, type ConsentPurpose } from '@wildo-ai/saas-models/public-runtime';\nimport type { FrontendWebsiteProviderRegistry } from './frontend-provider-registry.website';\nimport type { WebsiteProviderComponentRegistry } from './provider-component-registry.website';\nimport type { WebsiteProviderSdkActivation } from './website-provider-sdk-activations';\n\n/**\n * A stable key for a granted-purpose set, so an effect re-runs when the SET changes and not when a new\n * array with the same members is handed in.\n */\nfunction grantedKey(grantedConsentPurposes: readonly ConsentPurpose[]): string {\n  return [...grantedConsentPurposes].sort().join(',');\n}\n\n/**\n * Injects the `<script>` tags of the live providers that rest on NO consent purpose and render no component.\n *\n * No consent input, deliberately (#1704): an executed `<script>` cannot be stopped, so a provider that rests on a\n * purpose must ship as a stoppable SDK (started on the grant and stopped on withdrawal by\n * {@link useWebsiteProviderSdks}); a consent-based module declaring `scripts` is refused at projection and skipped by\n * the collector. No grant could change what this injects.\n */\nexport function useWebsiteProviderScripts(\n  registry: FrontendWebsiteProviderRegistry | undefined,\n  /**\n   * The website's provider-component registry (#1703). A provider with a registered component loads its\n   * scripts WITH that component, when a page first shows it — so an address lookup's vendor loader is\n   * not downloaded on every page of the site, only on the one with the form. This hook injects the rest.\n   */\n  componentRegistry?: WebsiteProviderComponentRegistry,\n): void {\n  useEffect(() => {\n    if (typeof document === 'undefined') return;\n\n    const withComponents = [...(componentRegistry?.providersWithComponents() ?? [])].map((providerRef) => ({ providerRef }));\n    const scripts = collectProviderScriptsWithoutComponents(registry?.modules.values() ?? [], withComponents);\n    if (scripts.length === 0) return;\n\n    injectProviderScripts(scripts, document);\n    // Deliberately no teardown. A vendor tag installs a global and often starts\n    // work immediately; removing the element undoes neither, so a cleanup that\n    // removed it would only make the next mount inject a SECOND copy of an\n    // already-running script. Idempotence by `src` is the real guard.\n  }, [registry, componentRegistry]);\n}\n\n/**\n * Loads and starts the npm SDK of every live provider that declares one.\n *\n * Unlike a script tag, an SDK activation IS undone on unmount where the vendor\n * offers a teardown — an analytics client that cannot be stopped cannot honour\n * a consent withdrawal, and accumulates one instance per view transition.\n */\nexport function useWebsiteProviderSdks(\n  registry: FrontendWebsiteProviderRegistry | undefined,\n  /**\n   * The purposes the visitor granted (#534). Providers are activated in TWO groups on purpose: those that\n   * rest on no purpose (error monitoring, captcha) are started once and never restarted by a consent\n   * change, while the consent-based ones start when their purpose is granted and are DEACTIVATED when it\n   * is withdrawn — which is the only way a withdrawal stops a running analytics client.\n   */\n  grantedConsentPurposes: readonly ConsentPurpose[],\n): ReadonlyArray<WebsiteProviderSdkActivation> {\n  const consentFree = useProviderSdkGroup(registry, false, []);\n  const consentBased = useProviderSdkGroup(registry, true, grantedConsentPurposes);\n  // The providers RUNNING on this page, both groups, published by the page layout (#1735): a form reads the captcha\n  // vendor's handle from here. Emptied the moment a group stops, so nothing holds a handle past a withdrawal.\n  return useMemo(() => [...consentFree, ...consentBased], [consentFree, consentBased]);\n}\n\nfunction useProviderSdkGroup(\n  registry: FrontendWebsiteProviderRegistry | undefined,\n  consentBased: boolean,\n  grantedConsentPurposes: readonly ConsentPurpose[],\n): ReadonlyArray<WebsiteProviderSdkActivation> {\n  const [running, setRunning] = useState<ReadonlyArray<WebsiteProviderSdkActivation>>([]);\n  // Keyed by the grants this group's providers actually rest on, so changing an unrelated purpose does\n  // not stop and restart a running analytics client.\n  const relevant = registry === undefined\n    ? []\n    : [...registry.modules.values()]\n      .filter((module) => (consentPurposesRequiredByProvider(module).length > 0) === consentBased)\n      .flatMap((module) => consentPurposesRequiredByProvider(module))\n      .filter((purpose) => grantedConsentPurposes.includes(purpose));\n  const key = grantedKey(relevant);\n  // One lane per group for the page's lifetime: a start waits for the previous stop.\n  const lane = useRef(createFrontendProviderSdkActivationLane());\n  useEffect(() => {\n    if (registry === undefined) return;\n    const modules = [...registry.modules.values()].filter(\n      (module) => (consentPurposesRequiredByProvider(module).length > 0) === consentBased,\n    );\n    if (modules.length === 0) return;\n\n    // Through the group's lane, so a start never overlaps the previous stop of the same page-global vendor (#1704): a\n    // visitor who grants, withdraws and grants again while the bundle downloads must not have the first run's stop\n    // switch off the second run's client. The stop also covers an unmount mid-download.\n    const stop = lane.current.start(\n      () => activateFrontendProviderSdks({\n        surface: AppFrontendType.STATIC_WEBSITE,\n        modules,\n        grantedConsentPurposes,\n        onDiagnostic: (diagnostic) => {\n          // The website runtime has no logger service, and a provider that cannot\n          // start is a developer-facing fact that must not be silent.\n          // eslint-disable-next-line no-console\n          console.warn(`[wildo-provider-sdk] ${diagnostic.kind}: ${diagnostic.message}`);\n        },\n      }),\n      (result) => {\n        setRunning(modules.flatMap((module) => {\n          const activation = result.activations.get(module.metadata.ref);\n          return activation === undefined\n            ? []\n            : [{ providerRef: module.metadata.ref, providerCapabilities: [...module.providerCapabilities], activation }];\n        }));\n      },\n    );\n    return () => {\n      setRunning([]);\n      stop();\n    };\n    // eslint-disable-next-line react-hooks/exhaustive-deps -- keyed by the granted SET, see grantedKey.\n  }, [registry, consentBased, key]);\n  return running;\n}\n"]}

package/dist/esm/core/external-providers/website-provider-sdk-activations.d.ts

@@ -0,0 +1,11 @@
+import type { ProviderFrontendSdkActivation } from '@wildo-ai/external-connectors-public/website';
+/** One running provider: its ref, the capabilities it serves, and its activation (whose `handle` is the vendor's client). */
+export interface WebsiteProviderSdkActivation {
+    readonly providerRef: string;
+    readonly providerCapabilities: ReadonlyArray<string>;
+    readonly activation: ProviderFrontendSdkActivation;
+}
+export declare const WebsiteProviderSdkActivationsContext: import("react").Context<readonly WebsiteProviderSdkActivation[]>;
+/** The provider SDKs running on this page, in declaration order. Empty outside a page layout and before any start. */
+export declare function useWebsiteProviderSdkActivations(): ReadonlyArray<WebsiteProviderSdkActivation>;
+//# sourceMappingURL=website-provider-sdk-activations.d.ts.map

package/dist/esm/core/external-providers/website-provider-sdk-activations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"website-provider-sdk-activations.d.ts","sourceRoot":"","sources":["../../../../src/core/external-providers/website-provider-sdk-activations.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,8CAA8C,CAAC;AAElG,6HAA6H;AAC7H,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,oBAAoB,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACrD,QAAQ,CAAC,UAAU,EAAE,6BAA6B,CAAC;CACpD;AAED,eAAO,MAAM,oCAAoC,kEAAiE,CAAC;AAEnH,sHAAsH;AACtH,wBAAgB,gCAAgC,IAAI,aAAa,CAAC,4BAA4B,CAAC,CAE9F"}

package/dist/esm/core/external-providers/website-provider-sdk-activations.js

@@ -0,0 +1,14 @@
+/**
+ * The provider SDKs RUNNING on this website page (#1735), published by the page layout.
+ *
+ * A section reaches a running vendor through here rather than through a global — the contact form asks the consented
+ * captcha vendor for a token this way. The list is emptied the moment a provider is stopped (a consent withdrawal, a
+ * navigation), so a consumer that reads it at the moment it needs a handle never holds one past a withdrawal.
+ */
+import { createContext, useContext } from 'react';
+export const WebsiteProviderSdkActivationsContext = createContext([]);
+/** The provider SDKs running on this page, in declaration order. Empty outside a page layout and before any start. */
+export function useWebsiteProviderSdkActivations() {
+    return useContext(WebsiteProviderSdkActivationsContext);
+}
+//# sourceMappingURL=website-provider-sdk-activations.js.map

package/dist/esm/core/external-providers/website-provider-sdk-activations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"website-provider-sdk-activations.js","sourceRoot":"","sources":["../../../../src/core/external-providers/website-provider-sdk-activations.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAUlD,MAAM,CAAC,MAAM,oCAAoC,GAAG,aAAa,CAA8C,EAAE,CAAC,CAAC;AAEnH,sHAAsH;AACtH,MAAM,UAAU,gCAAgC;IAC9C,OAAO,UAAU,CAAC,oCAAoC,CAAC,CAAC;AAC1D,CAAC","sourcesContent":["/**\n * The provider SDKs RUNNING on this website page (#1735), published by the page layout.\n *\n * A section reaches a running vendor through here rather than through a global — the contact form asks the consented\n * captcha vendor for a token this way. The list is emptied the moment a provider is stopped (a consent withdrawal, a\n * navigation), so a consumer that reads it at the moment it needs a handle never holds one past a withdrawal.\n */\nimport { createContext, useContext } from 'react';\nimport type { ProviderFrontendSdkActivation } from '@wildo-ai/external-connectors-public/website';\n\n/** One running provider: its ref, the capabilities it serves, and its activation (whose `handle` is the vendor's client). */\nexport interface WebsiteProviderSdkActivation {\n  readonly providerRef: string;\n  readonly providerCapabilities: ReadonlyArray<string>;\n  readonly activation: ProviderFrontendSdkActivation;\n}\n\nexport const WebsiteProviderSdkActivationsContext = createContext<ReadonlyArray<WebsiteProviderSdkActivation>>([]);\n\n/** The provider SDKs running on this page, in declaration order. Empty outside a page layout and before any start. */\nexport function useWebsiteProviderSdkActivations(): ReadonlyArray<WebsiteProviderSdkActivation> {\n  return useContext(WebsiteProviderSdkActivationsContext);\n}\n"]}

package/dist/esm/core/factories/define-website-page-manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"define-website-page-manifest.d.ts","sourceRoot":"","sources":["../../../../../src/core/factories/define-website-page-manifest.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAE3C,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,4BAA4B,EAC7B,MAAM,8DAA8D,CAAC;AACtE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAEhF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,WAAW,8BAA8B,CAAC,MAAM;IACpD,GAAG,EAAE,cAAc,GAAG,MAAM,CAAC;IAC7B,SAAS,EAAE,oBAAoB,GAAG,MAAM,CAAC;IACzC,aAAa,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACrC,WAAW,EAAE,SAAS,CAAC,iBAAiB,GAAG,MAAM,CAAC,EAAE,CAAC;IACrD,aAAa,EAAE,wBAAwB,CAAC;IACxC,SAAS,CAAC,EAAE,4BAA4B,CAAC;IACzC,GAAG,CAAC,EAAE,oBAAoB,CAAC;CAC5B;AAED;;;;GAIG;AACH,MAAM,WAAW,wBAAwB,CAAC,MAAM,CAC9C,SAAQ,IAAI,CAAC,mBAAmB,EAAE,eAAe,CAAC;IAClD,aAAa,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CACtC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,EACtE,KAAK,EAAE,8BAA8B,CAAC,MAAM,CAAC,GAC5C,wBAAwB,CAAC,MAAM,CAAC,CAmBlC;AACD,yEAAyE"}
+{"version":3,"file":"define-website-page-manifest.d.ts","sourceRoot":"","sources":["../../../../src/core/factories/define-website-page-manifest.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAE3C,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,4BAA4B,EAC7B,MAAM,8DAA8D,CAAC;AACtE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAEhF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,WAAW,8BAA8B,CAAC,MAAM;IACpD,GAAG,EAAE,cAAc,GAAG,MAAM,CAAC;IAC7B,SAAS,EAAE,oBAAoB,GAAG,MAAM,CAAC;IACzC,aAAa,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACrC,WAAW,EAAE,SAAS,CAAC,iBAAiB,GAAG,MAAM,CAAC,EAAE,CAAC;IACrD,aAAa,EAAE,wBAAwB,CAAC;IACxC,SAAS,CAAC,EAAE,4BAA4B,CAAC;IACzC,GAAG,CAAC,EAAE,oBAAoB,CAAC;CAC5B;AAED;;;;GAIG;AACH,MAAM,WAAW,wBAAwB,CAAC,MAAM,CAC9C,SAAQ,IAAI,CAAC,mBAAmB,EAAE,eAAe,CAAC;IAClD,aAAa,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CACtC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,EACtE,KAAK,EAAE,8BAA8B,CAAC,MAAM,CAAC,GAC5C,wBAAwB,CAAC,MAAM,CAAC,CAmBlC;AACD,yEAAyE"}

package/dist/esm/core/factories/define-website-section.d.ts

@@ -65,9 +65,9 @@ export interface TypedWebsiteSectionDefinition<TProps> extends Omit<WebsiteSecti
  * **Why a factory instead of constructing the literal directly**:
  *   - Consumers don't have to remember to parse refs / keys
  *     themselves before assembling the literal.
- *   - The schema parse provides a single audited validation chokepoint
- *     so `wildo website audit` (Phase 7) can re-validate definitions
- *     without re-entering the React graph.
+ *   - The schema parse provides a single audited validation chokepoint,
+ *     and the parsed `expectedLabelKeys` are what `wildo website audit`
+ *     checks every locale pack against, without re-entering the React graph.
  *   - The factory is the documented authoring API the
  *     `website_factory_authoring` skill targets — keeping the
  *     authoring surface narrow lets the framework evolve the

package/dist/esm/core/factories/define-website-section.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"define-website-section.d.ts","sourceRoot":"","sources":["../../../../../src/core/factories/define-website-section.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAG3C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,kEAAkE,CAAC;AACjH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wDAAwD,CAAC;AACrG,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oDAAoD,CAAC;AAC1F,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,sEAAsE,CAAC;AAExH;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,yBAAyB,CAAC,MAAM;IAC/C,UAAU,EAAE,iBAAiB,GAAG,MAAM,CAAC;IACvC,QAAQ,EAAE,sBAAsB,CAAC;IACjC,iBAAiB,EAAE,SAAS,CAAC,eAAe,GAAG,MAAM,CAAC,EAAE,CAAC;IACzD,SAAS,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACjC;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,MAAM,2BAA2B,CAAC;CACvD;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,6BAA6B,CAAC,MAAM,CACnD,SAAQ,IAAI,CAAC,wBAAwB,EAAE,WAAW,GAAG,mBAAmB,CAAC;IACzE,SAAS,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACjC,iBAAiB,CAAC,EAAE,MAAM,2BAA2B,CAAC;CACvD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EACzC,KAAK,EAAE,yBAAyB,CAAC,MAAM,CAAC,GACvC,6BAA6B,CAAC,MAAM,CAAC,CAoBvC;AACD,mEAAmE"}
+{"version":3,"file":"define-website-section.d.ts","sourceRoot":"","sources":["../../../../src/core/factories/define-website-section.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAG3C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,kEAAkE,CAAC;AACjH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wDAAwD,CAAC;AACrG,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oDAAoD,CAAC;AAC1F,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,sEAAsE,CAAC;AAExH;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,yBAAyB,CAAC,MAAM;IAC/C,UAAU,EAAE,iBAAiB,GAAG,MAAM,CAAC;IACvC,QAAQ,EAAE,sBAAsB,CAAC;IACjC,iBAAiB,EAAE,SAAS,CAAC,eAAe,GAAG,MAAM,CAAC,EAAE,CAAC;IACzD,SAAS,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACjC;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,MAAM,2BAA2B,CAAC;CACvD;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,6BAA6B,CAAC,MAAM,CACnD,SAAQ,IAAI,CAAC,wBAAwB,EAAE,WAAW,GAAG,mBAAmB,CAAC;IACzE,SAAS,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACjC,iBAAiB,CAAC,EAAE,MAAM,2BAA2B,CAAC;CACvD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EACzC,KAAK,EAAE,yBAAyB,CAAC,MAAM,CAAC,GACvC,6BAA6B,CAAC,MAAM,CAAC,CAoBvC;AACD,mEAAmE"}

package/dist/esm/core/factories/define-website-section.js

@@ -15,9 +15,9 @@ import { WebsiteSectionDefinitionSchema } from '../../schemas/sections/website-s
  * **Why a factory instead of constructing the literal directly**:
  *   - Consumers don't have to remember to parse refs / keys
  *     themselves before assembling the literal.
- *   - The schema parse provides a single audited validation chokepoint
- *     so `wildo website audit` (Phase 7) can re-validate definitions
- *     without re-entering the React graph.
+ *   - The schema parse provides a single audited validation chokepoint,
+ *     and the parsed `expectedLabelKeys` are what `wildo website audit`
+ *     checks every locale pack against, without re-entering the React graph.
  *   - The factory is the documented authoring API the
  *     `website_factory_authoring` skill targets — keeping the
  *     authoring surface narrow lets the framework evolve the